Network Security

Network Security

1. Network Vulnerabilities and Risks

   • Denial of Service
     • an interruption in an authorized user's access to a computer network, typically one caused with malicious intent.
   • Malware
   • Brute Force Attack
     • A brute force attack is a trial-and-error method used to obtain information such as a user password or personal identification number (PIN). In a brute force attack, automated software is used to generate a large number of consecutive guesses as to the value of the desired data.
   • Trojan Horse
     • One of the most insidious types of Trojan horse is a program that claims to rid your computer of viruses but instead introduces viruses onto your computer. The term comes from the a Greek story of the Trojan War, in which the Greeks give a giant wooden horse to their foes, the Trojans, ostensibly as a peace offering.
   • Ransomware
   • Phishing
   • Social Engineering
     • SQL Injection
       • An SQL injection is a computer attack in which malicious code is embedded in a poorly-designed application and then passed to the backend database. The malicious data then produces database query results or actions that should never have been executed.
   • Man in the Middle
   • Data Interception
   • Packet Sniffing
   • Eavesdropping
     • Eavesdropping is the unauthorized real-time interception of a private communication, such as a phone call, instant message, videoconference or fax transmission. The term eavesdrop derives from the practice of actually standing under the eaves of a house, listening to conversations inside.
   • Message Tampering

2. Network Prevention Methods

   • Default installations of operating system and applications
     • Sendmail vulnerabilities
     • Not filtering packets for correct incoming and outgoing addresses
     • Non-existent or incomplete logging
     • Vulnerable CGI programs
   • Accounts with no password or weak password
   • Non-existent or incomplete backup
   • A large number of open ports
   • BIND weaknesses